diff --git a/modules/ocf/manifests/nginx_proxy.pp b/modules/ocf/manifests/nginx_proxy.pp index c0e4794d1..97de337c4 100644 --- a/modules/ocf/manifests/nginx_proxy.pp +++ b/modules/ocf/manifests/nginx_proxy.pp @@ -38,6 +38,7 @@ ssl_cert => $ssl_cert, ssl_key => $ssl_key, ssl_dhparam => $ssl_dhparam, + http2 => 'on', add_header => merge({ # HSTS header diff --git a/modules/ocf_www/files/vhost-web.jinja b/modules/ocf_www/files/vhost-web.jinja index 5ef766941..dc07ad35a 100644 --- a/modules/ocf_www/files/vhost-web.jinja +++ b/modules/ocf_www/files/vhost-web.jinja @@ -8,6 +8,7 @@ SSLEngine on SSLCertificateFile {{vhost.ssl.bundle}} SSLCertificateKeyFile {{vhost.ssl.key}} + Protocols h2 http/1.1 {% endif %} {% if vhost.is_redirect %} diff --git a/modules/ocf_www/manifests/init.pp b/modules/ocf_www/manifests/init.pp index 81213612c..fe4a08af3 100644 --- a/modules/ocf_www/manifests/init.pp +++ b/modules/ocf_www/manifests/init.pp @@ -18,6 +18,9 @@ include ocf::tmpfs include ocf::ssl::default + # enables the http2 module + apache::mod { 'http2': } + class { 'ocf::nfs': cron => false, web => false, diff --git a/modules/ocf_www/manifests/site/www.pp b/modules/ocf_www/manifests/site/www.pp index 304e7ef07..016b62696 100644 --- a/modules/ocf_www/manifests/site/www.pp +++ b/modules/ocf_www/manifests/site/www.pp @@ -112,6 +112,7 @@ ], custom_fragment => ' + Protocols h2 http/1.1 UserDir /services/http/users/ UserDir disabled root ',